Application Security Engineer
Cimpress is the world leader in mass customization. You’ve probably heard of our brands, Including WIRmachenDRUCK, Vista, Printdeal, Druck.at, National Pen, Pixartprinting Exaprint, Tradeprint, EasyFlyer, BuildaSign and others. WIRmachenDRUCK – as part of Cimpress - is looking for a (Senior) Application Security Engineer to support and coordinate our development teams in terms of application security as well help to continuously develop our Secure Software Development Lifecycle (SSDLC). In this role, as part of WIRmachenDRUCK central security team, you will work with our development community to develop and implement secure coding practices. You will be shaping our security vision and have a tangible impact on a large and ever-increasing number of developers. This is an excellent opportunity for individuals looking to significantly impact an exciting, highly creative, and ever-evolving culture. Join us and make your mark!
What You Will Do
As an Application Security Engineer, you will provide the architectural expertise to ensure robust and resilient software. You will also have a critical role in ensuring we are providing the proper training, development frameworks, enabling our developers the freedom to experiment and take informed decisions when trying new things. We’re seeking someone passionate about software development and looking for opportunities to improve it.
Your Qualifications
• Excellent verbal and written communication skills for presenting solutions and sharing knowledge.
• 2+ years of experience as a software engineer & developer with hands-on experience in developing security measures in enterprise level software products.
• Coding & Software Development Experience
o Develop flowcharts, layouts, and documentation to identify requirements and solutions.
o Develop/code well-designed & testable security features/functionalities into software.
o Integrate software security components into a fully functional software system.
o Troubleshoot, debug, and upgrade existing gaps in security features of the applications.
o Peer review code and handle issues.
o Identify and fix security vulnerabilities in code.
• Security Practices and Implementation Experience
o Develop, implement and enforce security policies, standards, and procedures within development teams.
o Monitor, assess and respond to security incidents. Security Testing, Assessment & Training
o Analyze bug reports, security scans, and penetration tests & coordinate fixes.
o Participate in security design discussions.
o Conduct workshops and training on security for network, client, web app, wireless, and social
engineering.
Technical Skills and Knowledge
o Micro-service design, caching, and secure software design.
o Understanding of TCP/IP, HTTP, web security, and multi-tier web applications.
o Systems and application design, including trade-offs around performance.
o Experience with the AWS, LAMP stack (Linux, Apache, MySQL, PHP), Node.js (MERN
stack/MEAN stack).
o Experience with containerization and orchestration tools such as Docker and Kubernetes.
o Familiarity with CI/CD pipelines and related tools (Bitbucket CI).
Nice to Have
• Broad awareness of security engineering concepts and practices across all phases of the software
development lifecycle
• Knowledge of all kinds of security related protocols and standards (TLS, OAUTH)
• Knowledge of risk and security frameworks and standards (ISO 27001, NIST CSF, FAIR)
• Familiarity with the tools for various security activities: SCA, SAST/DAST as well as best-practice
documents like OWASP Top 20
Equal Opportunity Employer
WIRmachenDRUCK, a Cimpress company, is an Equal Employment Opportunity Employer. All qualified candidates will receive consideration for employment without regard to race, color, sex, national or ethnic origin, nationality, age, religion, citizenship, disability, medical condition, sexual orientation, gender identity, gender presentation, legal or preferred name, marital status, pregnancy, family structure, veteran status or any other basis protected by human rights laws or regulations. This list is not exhaustive and, in fact, in many cases, we strive to do more than the law requires.